Solved

Domain Trusts not working.  No Logon servers available to service the request.

Posted on 2011-09-07
15
1,227 Views
Last Modified: 2012-08-13
Morning Experts,

We currently have one domain called "ABC" (Windows 2003) and have created a new domain "DEF" (Windows 2008).  Both domains are are the same IP range and same subnet within the same network and use the same DNS servers.  I would like the  users to be able to access servers (NAS) on both domains.  I have set up the domain trusts but seem to be having some issues.  Servers on the ABC domain can access the shares with the DEF domain with no issues but when try to open a share from the DEF the to ABC domain I get the follow error \\NAS-SERVER is not accessible.  You might not have permissions to use this network resource.  Contact the administrator to find out of you have access permission.  There are currently no logon servers available to service the logon request."   I am trying the with the administrator account the on DEF domain.

Any ideas would be very much appreciated.

Thanks
0
Comment
Question by:Simon2301
  • 8
  • 7
15 Comments
 
LVL 26

Expert Comment

by:gtworek
ID: 36493897
Are you sure your DNS configuration is OK? Do you use AD integrated zones? How names are resolved in your environments?
0
 

Author Comment

by:Simon2301
ID: 36493900
What do I need to check.  My knowledge on DNS isn't up there.  And not using AD intergrated Zones.
0
 
LVL 26

Expert Comment

by:gtworek
ID: 36493909
What are your DCs IP addresses? What DNS servers your clients use?
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 

Author Comment

by:Simon2301
ID: 36493916
ABC domain 192.168.2.6 and DEF domain 192.168.2.48.  DNS Servers are 192.168.2.6 and 192.168.2.8
0
 
LVL 26

Accepted Solution

by:
gtworek earned 500 total points
ID: 36493931
This is definitely wrong. Windows client will use the first DNS and never will "ask" second one if the first one is working.
You should configure forwarding on DNS for ABC domain and configure all your clients to use only ABC domain DNS servers.
Then it should work as you expect.
0
 

Author Comment

by:Simon2301
ID: 36494046
Thats how its currently setup.  DEF is using ABC domains DNS servers
0
 
LVL 26

Expert Comment

by:gtworek
ID: 36494195
As DNS servers? As forwarders?
You did not describe your environment but I'm sure something is not OK with your DNS infrastructure...
0
 

Author Comment

by:Simon2301
ID: 36494204
The DNS will be is being provided by the ABC domain.  DEF is able to browse the web and so on using ABC dns server (192.168.2.6.  What do I need to check on DNS on both domains?
0
 
LVL 26

Expert Comment

by:gtworek
ID: 36494260
If so - why did you set 192.168.2.8 on your clients?
0
 

Author Comment

by:Simon2301
ID: 36494276
Our clients pick up 192.168.2.6 and 192.168.2.8 from DHCP.  Just incase 2.6 falls over.
0
 
LVL 26

Expert Comment

by:gtworek
ID: 36494284
And what is 192.168.2.8? Is it the second server for ABC?
0
 

Author Comment

by:Simon2301
ID: 36494285
yes
0
 

Author Comment

by:Simon2301
ID: 36494291
abc can view a nas on def without issues the problem is def seeing the nas on abc
0
 
LVL 26

Expert Comment

by:gtworek
ID: 36494316
Is nas registered in DNS you use?
Did you try to access nas using FQDN?
0
 

Author Comment

by:Simon2301
ID: 36494395
Just tried it and now getting "has-server.abc.local is not accessible.  You might not have permissions to use this network resource.  The servers clock is not synchronised with the primary domain controllers clock"

I have tried running net time \\print-server / set /y (print is our ntp) and its returning with system 5 error access is denied.

I have tired setting the permission on the has with abc domain but it can find def\administrator
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question